mirror of
				https://github.com/ethereum/solidity
				synced 2023-10-03 13:03:40 +00:00 
			
		
		
		
	
		
			
				
	
	
		
			154 lines
		
	
	
		
			4.6 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
			
		
		
	
	
			154 lines
		
	
	
		
			4.6 KiB
		
	
	
	
		
			C++
		
	
	
	
	
	
| /*
 | |
| 	This file is part of solidity.
 | |
| 
 | |
| 	solidity is free software: you can redistribute it and/or modify
 | |
| 	it under the terms of the GNU General Public License as published by
 | |
| 	the Free Software Foundation, either version 3 of the License, or
 | |
| 	(at your option) any later version.
 | |
| 
 | |
| 	solidity is distributed in the hope that it will be useful,
 | |
| 	but WITHOUT ANY WARRANTY; without even the implied warranty of
 | |
| 	MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | |
| 	GNU General Public License for more details.
 | |
| 
 | |
| 	You should have received a copy of the GNU General Public License
 | |
| 	along with solidity.  If not, see <http://www.gnu.org/licenses/>.
 | |
| */
 | |
| // SPDX-License-Identifier: GPL-3.0
 | |
| 
 | |
| #include <libsmtutil/SMTPortfolio.h>
 | |
| 
 | |
| #ifdef HAVE_Z3
 | |
| #include <libsmtutil/Z3Interface.h>
 | |
| #endif
 | |
| #ifdef HAVE_CVC4
 | |
| #include <libsmtutil/CVC4Interface.h>
 | |
| #endif
 | |
| #include <libsmtutil/SMTLib2Interface.h>
 | |
| 
 | |
| using namespace std;
 | |
| using namespace solidity;
 | |
| using namespace solidity::util;
 | |
| using namespace solidity::frontend;
 | |
| using namespace solidity::smtutil;
 | |
| 
 | |
| SMTPortfolio::SMTPortfolio(
 | |
| 	map<h256, string> const& _smtlib2Responses,
 | |
| 	frontend::ReadCallback::Callback const& _smtCallback,
 | |
| 	[[maybe_unused]] SMTSolverChoice _enabledSolvers
 | |
| )
 | |
| {
 | |
| 	m_solvers.emplace_back(make_unique<SMTLib2Interface>(_smtlib2Responses, _smtCallback));
 | |
| #ifdef HAVE_Z3
 | |
| 	if (_enabledSolvers.z3)
 | |
| 		m_solvers.emplace_back(make_unique<Z3Interface>());
 | |
| #endif
 | |
| #ifdef HAVE_CVC4
 | |
| 	if (_enabledSolvers.cvc4)
 | |
| 		m_solvers.emplace_back(make_unique<CVC4Interface>());
 | |
| #endif
 | |
| }
 | |
| 
 | |
| void SMTPortfolio::reset()
 | |
| {
 | |
| 	for (auto const& s: m_solvers)
 | |
| 		s->reset();
 | |
| }
 | |
| 
 | |
| void SMTPortfolio::push()
 | |
| {
 | |
| 	for (auto const& s: m_solvers)
 | |
| 		s->push();
 | |
| }
 | |
| 
 | |
| void SMTPortfolio::pop()
 | |
| {
 | |
| 	for (auto const& s: m_solvers)
 | |
| 		s->pop();
 | |
| }
 | |
| 
 | |
| void SMTPortfolio::declareVariable(string const& _name, SortPointer const& _sort)
 | |
| {
 | |
| 	smtAssert(_sort, "");
 | |
| 	for (auto const& s: m_solvers)
 | |
| 		s->declareVariable(_name, _sort);
 | |
| }
 | |
| 
 | |
| void SMTPortfolio::addAssertion(Expression const& _expr)
 | |
| {
 | |
| 	for (auto const& s: m_solvers)
 | |
| 		s->addAssertion(_expr);
 | |
| }
 | |
| 
 | |
| /*
 | |
|  * Broadcasts the SMT query to all solvers and returns a single result.
 | |
|  * This comment explains how this result is decided.
 | |
|  *
 | |
|  * When a solver is queried, there are four possible answers:
 | |
|  *   SATISFIABLE (SAT), UNSATISFIABLE (UNSAT), UNKNOWN, CONFLICTING, ERROR
 | |
|  * We say that a solver _answered_ the query if it returns either:
 | |
|  *   SAT or UNSAT
 | |
|  * A solver did not answer the query if it returns either:
 | |
|  *   UNKNOWN (it tried but couldn't solve it) or ERROR (crash, internal error, API error, etc).
 | |
|  *
 | |
|  * Ideally all solvers answer the query and agree on what the answer is
 | |
|  * (all say SAT or all say UNSAT).
 | |
|  *
 | |
|  * The actual logic as as follows:
 | |
|  * 1) If at least one solver answers the query, all the non-answer results are ignored.
 | |
|  *   Here SAT/UNSAT is preferred over UNKNOWN since it's an actual answer, and over ERROR
 | |
|  *   because one buggy solver/integration shouldn't break the portfolio.
 | |
|  *
 | |
|  * 2) If at least one solver answers SAT and at least one answers UNSAT, at least one of them is buggy
 | |
|  * and the result is CONFLICTING.
 | |
|  *   In the future if we have more than 2 solvers enabled we could go with the majority.
 | |
|  *
 | |
|  * 3) If NO solver answers the query:
 | |
|  *   If at least one solver returned UNKNOWN (where the rest returned ERROR), the result is UNKNOWN.
 | |
|  *   This is preferred over ERROR since the SMTChecker might decide to abstract the query
 | |
|  *   when it is told that this is a hard query to solve.
 | |
|  *
 | |
|  *   If all solvers return ERROR, the result is ERROR.
 | |
| */
 | |
| pair<CheckResult, vector<string>> SMTPortfolio::check(vector<Expression> const& _expressionsToEvaluate)
 | |
| {
 | |
| 	CheckResult lastResult = CheckResult::ERROR;
 | |
| 	vector<string> finalValues;
 | |
| 	for (auto const& s: m_solvers)
 | |
| 	{
 | |
| 		CheckResult result;
 | |
| 		vector<string> values;
 | |
| 		tie(result, values) = s->check(_expressionsToEvaluate);
 | |
| 		if (solverAnswered(result))
 | |
| 		{
 | |
| 			if (!solverAnswered(lastResult))
 | |
| 			{
 | |
| 				lastResult = result;
 | |
| 				finalValues = std::move(values);
 | |
| 			}
 | |
| 			else if (lastResult != result)
 | |
| 			{
 | |
| 				lastResult = CheckResult::CONFLICTING;
 | |
| 				break;
 | |
| 			}
 | |
| 		}
 | |
| 		else if (result == CheckResult::UNKNOWN && lastResult == CheckResult::ERROR)
 | |
| 			lastResult = result;
 | |
| 	}
 | |
| 	return make_pair(lastResult, finalValues);
 | |
| }
 | |
| 
 | |
| vector<string> SMTPortfolio::unhandledQueries()
 | |
| {
 | |
| 	// This code assumes that the constructor guarantees that
 | |
| 	// SmtLib2Interface is in position 0.
 | |
| 	smtAssert(!m_solvers.empty(), "");
 | |
| 	smtAssert(dynamic_cast<SMTLib2Interface*>(m_solvers.front().get()), "");
 | |
| 	return m_solvers.front()->unhandledQueries();
 | |
| }
 | |
| 
 | |
| bool SMTPortfolio::solverAnswered(CheckResult result)
 | |
| {
 | |
| 	return result == CheckResult::SATISFIABLE || result == CheckResult::UNSATISFIABLE;
 | |
| }
 |